-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-silverstripe-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-silverstripe-19.0-trixie-amd64.iso
      c6662cbb83fcbab44dc43125707198e9dbbd4cead1ee4a1c878778291d06e2fb  turnkey-silverstripe-19.0-trixie-amd64.iso

    $ sha512sum turnkey-silverstripe-19.0-trixie-amd64.iso
      d79e5208c772e372220661943a5a9ba86e4d67d0f8f89159cc6824f2f28952286e22ee0d2f42792a409acb0831f4e409798b79882747b94360ac5df6f4f6c396  turnkey-silverstripe-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-silverstripe-19.0-trixie-amd64.iso.hash
      turnkey-silverstripe-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-silverstripe-19.0-trixie-amd64.iso.hash
      turnkey-silverstripe-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=M1je
-----END PGP SIGNATURE-----